Trade.xyz, the Hyperliquid-based trading platform offering perpetual futures tied to stocks, indexes and commodities, has restored its technical documentation after unauthorized activity affected its GitBook pages, while maintaining a warning against clicking links as its investigation continues.

The November 2 incident affected the platform's documentation infrastructure, with the team restoring the previous version by 9:15 a.m. Eastern Time (14:15 UTC). Trade.xyz has reported no confirmed losses, trading interruptions or disruption to on-chain settlements, although it has yet to disclose how the unauthorized access occurred.

The security event comes just days after the platform announced a strategic investment from Intercontinental Exchange (ICE), the parent company of the New York Stock Exchange, as part of plans to introduce regulated perpetual futures trading in the United States.

Documentation Restored, but Link Warning Remains

Trade.xyz confirmed the unauthorized activity affecting its GitBook documentation on Monday morning, prompting an immediate security review and restoration of the affected pages. Despite completing the restoration, the team maintained its precautionary guidance.

"As a precaution, we advise users not to click on any links within the documentation while our investigation remains ongoing," Trade.xyz said in a statement on X.

The platform has not disclosed whether attackers modified specific pages, inserted malicious links or gained access through compromised credentials. No attacker-controlled addresses or confirmed wallet-draining transactions have been identified publicly.

GitBook, a commercial documentation platform, is widely used by cryptocurrency projects to host technical documentation, including wallet integration instructions, trading specifications and developer resources. Because these pages often serve as the reference point for users connecting wallets or following integration instructions, unauthorized changes to such materials can expose them to phishing websites or fraudulent transaction requests, even when the underlying blockchain infrastructure remains operational.

Trade.xyz's trading markets operate through Hyperliquid's HIP-3 framework, allowing users to trade perpetual contracts referencing traditional financial assets through blockchain-based settlement. There is currently no confirmed indication that Hyperliquid's smart contracts or settlement infrastructure were compromised in the incident.

The company said it would provide further updates as its investigation progresses, without specifying when the remaining link restrictions might be lifted.

Incident Follows Major Expansion News

The breach emerged four days after ICE agreed to invest in Trade.xyz and establish a separate U.S.-regulated derivatives market built on Hyperliquid infrastructure. The proposed venture would offer around-the-clock perpetual contracts referencing cryptocurrencies, equities, commodities and foreign exchange, subject to regulatory approvals.

Trade.xyz reported more than $650 billion in cumulative trading volume across its existing markets over the preceding year, reflecting growing demand for blockchain-based exposure to traditional financial assets.

The documentation incident also coincides with a wave of cryptocurrency security breaches targeting infrastructure outside core blockchain protocols, from domain name records to front-end website code. On October 31, at least 12 cryptocurrency websites were compromised in a DNS hijacking campaign, with affected projects including Flap, Kintsu and StonkFun. Security researchers identified malicious pages deploying StepDrainer software to target connected wallets.

Earlier, Polymarket suffered a $2.7 million wallet-draining attack after attackers compromised a third-party monitoring service and injected malicious JavaScript into its trading interface. Mercado Bitcoin, meanwhile, suspended operations following a security breach involving approximately $38 million in digital assets.

Separately, blockchain investigator ZachXBT flagged a suspected $106 million theft from an unidentified European entity's centralized exchange accounts on November 1 via Telegram. The attacker reportedly converted stolen stablecoins into ETH and Monero through multiple services.

There is no established connection between those incidents and Trade.xyz.

The platform's documentation has been restored, but the cause and full scope of the unauthorized activity remain unresolved, with the method of access still unknown and no timeline for lifting the link advisory. Until the investigation concludes, users have been advised to avoid links within its GitBook documentation and rely on verified communication channels.